authentik helm

No introduction found. Create it?

Install

Install with:

helm repo add authentik-charts https://charts.goauthentik.io/
helm install authentik authentik-charts/authentik -f values.yaml

Top Repositories (2 out of 29)

See examples from other people.

NameRepoStarsVersionTimestamp
authentikangelnu/k8s-gitops1052023.8.312 days ago
authentikdfroberg/cluster422022.9.0a year ago

Values

See the most popular values for this chart:

KeyTypes
ingress.enabled (28)
true
boolean
ingress.hosts[].host (28)
authentik.${SECRET_DOMAIN}
string
ingress.hosts[].paths[].path (28)
/
string
ingress.hosts[].paths[].pathType (19)
Prefix
string
ingress.hosts[].paths[].service.port (1)
80
number
ingress.tls[].hosts[] (27)
- authentik.${SECRET_DOMAIN}
string
ingress.tls[].secretName (17)
tls.authentik
string
ingress.ingressClassName (26)
nginx
string
ingress.annotations."cert-manager.io/cluster-issuer" (13)
letsencrypt-production
string
ingress.annotations."external-dns.alpha.kubernetes.io/target" (11)
external.${SECRET_DOMAIN}
string
ingress.annotations."hajimari.io/icon" (11)
account-check
string
ingress.annotations."hajimari.io/enable" (9)
true
string
ingress.annotations."nginx.ingress.kubernetes.io/proxy-read-timeout" (6)
3600
string
ingress.annotations."nginx.ingress.kubernetes.io/proxy-send-timeout" (6)
3600
string
ingress.annotations."hajimari.io/appName" (5)
Authentik
string
ingress.annotations."nginx.ingress.kubernetes.io/enable-global-auth" (5)
false
string
ingress.annotations."nginx.org/websocket-services" (5)
authentik
string
ingress.annotations."traefik.ingress.kubernetes.io/router.entrypoints" (4)
websecure
string
ingress.annotations."nginx.ingress.kubernetes.io/router.entrypoints" (3)
websecure
string
ingress.annotations.external-dns/is-public (2)
true
string
ingress.annotations."external-dns.alpha.kubernetes.io/hostname" (2)
authentik.${EXTERNAL_DOMAIN}
string
ingress.annotations."external-dns.home.arpa/enabled" (2)
true
string
ingress.annotations."gethomepage.dev/enabled" (2)
true
string
ingress.annotations."gethomepage.dev/group" (2)
Security
string
ingress.annotations."gethomepage.dev/icon" (2)
authentik
string
ingress.annotations."gethomepage.dev/name" (2)
Authentik
string
ingress.annotations."hajimari.io/group" (2)
tools
string
ingress.annotations."kubernetes.io/tls-acme" (2)
true
string
ingress.annotations."coredns.io/hostname" (1)
auth.${XYZ_DOMAIN}
string
ingress.annotations."external-dns.alpha.kubernetes.io/cloudflare-proxied" (1)
true
string
ingress.annotations."external-dns.target/enabled" (1)
true
string
ingress.annotations."gethomepage.dev/description" (1)
Open-source Identity Provider focused on flexibility and versatility.
string
ingress.annotations."gethomepage.dev/widget.key" (1)
{{HOMEPAGE_VAR_AUTHENTIK_TOKEN}}
string
ingress.annotations."gethomepage.dev/widget.type" (1)
authentik
string
ingress.annotations."gethomepage.dev/widget.url" (1)
https://authentik.${SECRET_DOMAIN}
string
ingress.annotations."hajimari.io/info" (1)
Single Sign On for Casa96
string
ingress.annotations."hajimari.io/instance" (1)
bloop-xyz,bloop-quarky
string
ingress.annotations."hajimari.io/url" (1)
https://auth.${XYZ_DOMAIN}
string
ingress.annotations."haproxy-ingress-proxy.pfsense.org/backend" (1)
nginx-443
string
ingress.annotations."haproxy-ingress-proxy.pfsense.org/enabled" (1)
true
string
ingress.annotations."haproxy-ingress-proxy.pfsense.org/frontend" (1)
https-443
string
ingress.annotations."kubernetes.io/ingress.class" (1)
nginx
string
ingress.annotations."traefik.ingress.kubernetes.io/router.middlewares" (1)
networking-chain-no-auth@kubernetescrd
string
redis.enabled (28)
true
boolean
redis.auth.enabled (10)
true
boolean
redis.auth.password (5)
${AUTHENTIK_REDIS_PASSWORD}
string
redis.metrics.enabled (4)
true
boolean
redis.metrics.serviceMonitor.enabled (4)
true
boolean
redis.metrics.resources.limits.memory (1)
20Mi
string
redis.metrics.resources.requests.cpu (1)
10m
string
redis.metrics.resources.requests.memory (1)
10Mi
string
redis.persistence.enabled (4)
false
boolean
redis.global.storageClass (2)
zfs-iscsi
string
redis.global.imageRegistry (1)
proxy.registry.beryju.org
string
redis.architecture (1)
standalone
string
redis.commonConfiguration (1)
# Enable AOF https://redis.io/topics/persistence#append-only-file appendonly yes # Disable RDB persistence, AOF persistence already enabled. save "" maxmemory 94371840 maxmemory-policy allkeys-lru
string
redis.image.tag (1)
6.2.10-debian-11-r13
string
redis.master.persistence.enabled (1)
true
boolean
redis.master.persistence.existingClaim (1)
authentik-redis-pvc
string
redis.master.persistence.size (1)
1Gi
string
redis.master.podSecurityContext.enabled (1)
true
boolean
redis.master.podSecurityContext.fsGroup (1)
1001
number
redis.master.podSecurityContext.fsGroupChangePolicy (1)
OnRootMismatch
string
redis.master.podSecurityContext.runAsGroup (1)
1001
number
redis.master.podSecurityContext.runAsUser (1)
1001
number
redis.master.resources.limits.memory (1)
100Mi
string
redis.master.resources.requests.cpu (1)
15m
string
redis.master.resources.requests.memory (1)
50Mi
string
redis.master.securityContext.enabled (1)
true
boolean
redis.replica.podSecurityContext.enabled (1)
true
boolean
redis.replica.podSecurityContext.fsGroup (1)
1001
number
redis.replica.podSecurityContext.fsGroupChangePolicy (1)
OnRootMismatch
string
redis.replica.podSecurityContext.runAsGroup (1)
1001
number
redis.replica.podSecurityContext.runAsUser (1)
1001
number
authentik.log_level (19)
debug
string
authentik.postgresql.name (17)
authentik
string
authentik.postgresql.host (16)
postgresql.database.svc.cluster.local
string
authentik.postgresql.password (14)
${SECRET_AUTHENTIK_POSTGRES_PASSWORD}
string
authentik.postgresql.user (14)
authentik
string
authentik.postgresql.port (4)
5432
number
authentik.postgresql.s3_backup.access_key (2)
${SECRET_MINIO_ACCESS_KEY}
string
authentik.postgresql.s3_backup.bucket (2)
authentik
string
authentik.postgresql.s3_backup.host (2)
https://${SECRET_MINIO_HOST}
string
authentik.postgresql.s3_backup.secret_key (2)
${SECRET_MINIO_SECRET_KEY}
string
authentik.postgresql.enabled (1)
false
boolean
authentik.postgresql.username (1)
authentik
string
authentik.secret_key (15)
${SECRET_AUTHENTIK_SECRET_KEY}
string
authentik.email.from (14)
id@${SECRET_DOMAIN}
string
authentik.email.port (14)
587
number, string
authentik.email.host (12)
smtp.gmail.com
string
authentik.email.use_tls (8)
true
boolean, string
authentik.email.password (7)
${AUTHENTIK_EMAIL_PASSWORD}
string
authentik.email.use_ssl (7)
true
boolean, string
authentik.email.username (7)
${AUTHENTIK_EMAIL_USERNAME}
string
authentik.email.timeout (1)
${AUTHENTIK_EMAIL_TIMEOUT}
string
authentik.error_reporting.enabled (13)
true
boolean
authentik.error_reporting.send_pii (3)
false
boolean
authentik.error_reporting.environment (1)
beryjuio-prod
string
authentik.error_reporting.sample_rate (1)
0.5
number
authentik.error_reporting.sentry_dsn (1)
https://7f785644f04047ea8202df0320bb671d@sentry.beryju.org/3
string
authentik.outposts.docker_image_base (11)
ghcr.io/goauthentik/%(type)s:%(version)s
string
authentik.outposts.container_image_base (4)
ghcr.io/goauthentik/%(type)s:%(version)s
string
authentik.redis.host (11)
{{ .Release.Name }}-redis-master
string
authentik.redis.password (8)
${AUTHENTIK_REDIS_PASSWORD}
string
authentik.avatars (3)
gravatar,initials
string
authentik.geoip (1)
/geoip/GeoLite2-City.mmdb
string
authentik.security_key (1)

string
image.repository (19)
ghcr.io/goauthentik/server
string
image.tag (18)
2023.6.1
string
image.pullPolicy (9)
IfNotPresent
string
image.digest (2)
sha256:6adc7281a2d7dcc870be0fb802fe05e5fa98726a89e0affe76fc295c8b931e47
string
prometheus.serviceMonitor.create (18)
true
boolean
prometheus.serviceMonitor.interval (6)
30s
string
prometheus.serviceMonitor.scrapeTimeout (6)
3s
string
prometheus.rules.create (14)
true
boolean
postgresql.enabled (17)
false
boolean
postgresql.postgresqlPassword (6)
${SECRET_AUTHENTIK_POSTGRES_PASSWORD}
string
postgresql.persistence.enabled (4)
true
boolean
postgresql.persistence.existingClaim (4)
authentik-postgresql-v1
string
postgresql.postgresqlDatabase (4)
authentik
string
postgresql.postgresqlUsername (4)
authentik
string
postgresql.metrics.enabled (2)
true
boolean
postgresql.metrics.serviceMonitor.enabled (2)
true
boolean
postgresql.global.imageRegistry (1)
proxy.registry.beryju.org
string
postgresql.postgresqlMaxConnections (1)
500
number
postgresql.primary.podSecurityContext.enabled (1)
true
boolean
postgresql.primary.podSecurityContext.fsGroup (1)
1001
number
postgresql.primary.podSecurityContext.fsGroupChangePolicy (1)
OnRootMismatch
string
postgresql.primary.podSecurityContext.runAsGroup (1)
1001
number
postgresql.primary.podSecurityContext.runAsUser (1)
1001
number
geoip.enabled (8)
false
boolean
geoip.accountId (1)
878850
string
geoip.editionIds (1)
GeoLite2-City
string
geoip.image (1)
maxmindinc/geoipupdate:v6.0
string
geoip.licenseKey (1)
${SECRET_MAXMIND_LICENSE_KEY}
string
geoip.updateInterval (1)
8
number
envFrom[].secretRef.name (6)
authentik-secret
string
initContainers.init-db.envFrom[].secretRef.name (6)
authentik-secret
string
initContainers.init-db.image (6)
ghcr.io/onedr0p/postgres-init:14.9
string
initContainers.init-db.imagePullPolicy (4)
IfNotPresent
string
serviceAccount.create (6)
true
boolean
serviceAccount.fullnameOverride (1)
authentik
string
serviceAccount.nameOverride (1)
authentik
string
serviceAccount.serviceAccountSecret.enabled (1)
false
boolean
volumeMounts[].mountPath (6)
/media
string
volumeMounts[].name (6)
media
string
volumeMounts[].readOnly (3)
true
boolean
volumes[].name (6)
media
string
volumes[].secret.items[].key (3)
tls.crt
tls.key
string
volumes[].secret.items[].path (3)
fullchain.pem
privkey.pem
string
volumes[].secret.optional (3)
false
boolean
volumes[].secret.secretName (3)
authentik-tls
string
volumes[].configMap.name (2)
authentik-branding
string
volumes[].persistentVolumeClaim.claimName (1)
authentik-media
string
volumes[].projected.defaultMode (1)
775
number
volumes[].projected.sources[].configMap.items[].key (1)
sound_wave.svg
string
volumes[].projected.sources[].configMap.items[].path (1)
sound_wave.svg
string
volumes[].projected.sources[].configMap.name (1)
background-image-1
string
replicas (5)
1
number
worker.replicas (5)
1
number
envValueFrom.AUTHENTIK_POSTGRESQL__PASSWORD.secretKeyRef.key (4)
password
string
envValueFrom.AUTHENTIK_POSTGRESQL__PASSWORD.secretKeyRef.name (4)
pg-authentik-app
string
envValueFrom.AUTHENTIK_POSTGRESQL__USER.secretKeyRef.key (4)
username
string
envValueFrom.AUTHENTIK_POSTGRESQL__USER.secretKeyRef.name (4)
pg-authentik-app
string
envValueFrom.AUTHENTIK_POSTGRESQL__NAME.secretKeyRef.key (3)
username
string
envValueFrom.AUTHENTIK_POSTGRESQL__NAME.secretKeyRef.name (3)
pg-authentik-app
string
envValueFrom.AUTHENTIK_EMAIL__FROM.secretKeyRef.key (1)
AUTHENTIK_EMAIL__FROM
string
envValueFrom.AUTHENTIK_EMAIL__FROM.secretKeyRef.name (1)
authentik-secrets
string
envValueFrom.AUTHENTIK_EMAIL__HOST.secretKeyRef.key (1)
AUTHENTIK_EMAIL__HOST
string
envValueFrom.AUTHENTIK_EMAIL__HOST.secretKeyRef.name (1)
authentik-secrets
string
envValueFrom.AUTHENTIK_EMAIL__PASSWORD.secretKeyRef.key (1)
AUTHENTIK_EMAIL__PASSWORD
string
envValueFrom.AUTHENTIK_EMAIL__PASSWORD.secretKeyRef.name (1)
authentik-secrets
string
envValueFrom.AUTHENTIK_EMAIL__PORT.secretKeyRef.key (1)
AUTHENTIK_EMAIL__PORT
string
envValueFrom.AUTHENTIK_EMAIL__PORT.secretKeyRef.name (1)
authentik-secrets
string
envValueFrom.AUTHENTIK_EMAIL__USE_TLS.secretKeyRef.key (1)
AUTHENTIK_EMAIL__USE_TLS
string
envValueFrom.AUTHENTIK_EMAIL__USE_TLS.secretKeyRef.name (1)
authentik-secrets
string
envValueFrom.AUTHENTIK_EMAIL__USERNAME.secretKeyRef.key (1)
AUTHENTIK_EMAIL__USERNAME
string
envValueFrom.AUTHENTIK_EMAIL__USERNAME.secretKeyRef.name (1)
authentik-secrets
string
envValueFrom.AUTHENTIK_POSTGRESQL__HOST.secretKeyRef.key (1)
HOST
string
envValueFrom.AUTHENTIK_POSTGRESQL__HOST.secretKeyRef.name (1)
authentik-postgres-authentik
string
envValueFrom.AUTHENTIK_REDIS__PASSWORD.secretKeyRef.key (1)
password
string
envValueFrom.AUTHENTIK_REDIS__PASSWORD.secretKeyRef.name (1)
authentik-redis
string
envValueFrom.AUTHENTIK_SECRET_KEY.secretKeyRef.key (1)
AUTHENTIK_SECRET_KEY
string
envValueFrom.AUTHENTIK_SECRET_KEY.secretKeyRef.name (1)
authentik-secrets
string
resources.server.requests.cpu (3)
200m
string
resources.server.requests.memory (1)
500Mi
string
resources.server.limits.cpu (2)
2
string
resources.server.limits.memory (1)
800Mi
string
resources.worker.limits.memory (1)
1200Mi
string
resources.worker.requests.cpu (1)
50m
string
resources.worker.requests.memory (1)
500Mi
string
service.port (3)
80
number
service.enabled (2)
true
boolean
service.name (2)
http
string
service.protocol (2)
TCP
string
service.type (2)
ClusterIP
string
controller.annotations."secret.reloader.stakater.com/reload" (2)
authentik-secret
string
fullnameOverride (2)
authentik
string
global.storageClass (2)
ceph-block
string
podAnnotations."secret.reloader.stakater.com/reload" (2)
authentik-secrets
string
affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].key (1)
kubernetes.io/arch
string
affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].operator (1)
In
string
affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].values[] (1)
- amd64
- i386
- i686
- x86
string
affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].weight (1)
60
number
autoscaling.server.enabled (1)
true
boolean
autoscaling.server.minReplicas (1)
2
number
env.AUTHENTIK_EMAIL__HOST (1)
${SECRET_SMTP_HOST}
string
env.AUTHENTIK_EMAIL__PORT (1)
587
number
env.AUTHENTIK_EMAIL__USE_TLS (1)
true
string
kubernetesIntegration (1)
true
boolean
livenessProbe.enabled (1)
true
boolean
livenessProbe.httpGet.path (1)
/-/health/live/
string
livenessProbe.httpGet.port (1)
http
string
livenessProbe.initialDelaySeconds (1)
50
number
livenessProbe.periodSeconds (1)
10
number
nodeSelector.worker (1)
yes
string
podLabels."spiffe.bloopysphere.arpa/enabled" (1)
true
string
podSecurityContext.fsGroup (1)
1001
number
podSecurityContext.fsGroupChangePolicy (1)
OnRootMismatch
string
podSecurityContext.runAsGroup (1)
1001
number
podSecurityContext.runAsUser (1)
1001
number
postgres.enabled (1)
false
boolean
readinessProbe.enabled (1)
true
boolean
readinessProbe.httpGet.path (1)
/-/health/ready/
string
readinessProbe.httpGet.port (1)
http
string
readinessProbe.initialDelaySeconds (1)
50
number
readinessProbe.periodSeconds (1)
10
number
replicaCount (1)
1
number
securityContext.fsGroup (1)
1000
number